Static task
static1
Behavioral task
behavioral1
Sample
e4e19b01c0fc329e3ee0bde2b8fac603b16d006b055c7b773e87459e6f6f0f50.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e4e19b01c0fc329e3ee0bde2b8fac603b16d006b055c7b773e87459e6f6f0f50.exe
Resource
win10v2004-20230220-en
General
-
Target
e4e19b01c0fc329e3ee0bde2b8fac603b16d006b055c7b773e87459e6f6f0f50
-
Size
204KB
-
MD5
7b9618d11a7cb860599901a3ab390058
-
SHA1
f67a74eb1721729d61c2f5447ffbf5bee52dfe72
-
SHA256
e4e19b01c0fc329e3ee0bde2b8fac603b16d006b055c7b773e87459e6f6f0f50
-
SHA512
337cf5e6201a54ac7c4d2367cb53975e9f78d730101f53c046ac597cbb40e107442dbd08cb2ce423c90665362e28550927a479c4401b609889d21efbd81befa2
-
SSDEEP
1536:RUr7+FplOPmtzkSNA9DvuBehsK2jWTQuz+cLu+J8P8vTBcQnZZQMS25Ut3XplVic:RqwOIouAaPuZ/z3QMR5GHzHrCoA2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4e19b01c0fc329e3ee0bde2b8fac603b16d006b055c7b773e87459e6f6f0f50
Files
-
e4e19b01c0fc329e3ee0bde2b8fac603b16d006b055c7b773e87459e6f6f0f50.exe windows x86
a77a1f925109c32923d9e774c5e64d11
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
WriteConsoleW
GetACP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
WriteConsoleA
SetStdHandle
IsValidCodePage
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
FlushFileBuffers
SetFilePointer
GetSystemDefaultLangID
SetThreadUILanguage
GetVersionExA
CreateThread
Sleep
WriteFile
CreateFileA
GetFileSize
CloseHandle
OutputDebugStringA
ReadFile
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
FormatMessageA
GetLocalTime
GetOEMCP
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
GetCPInfo
user32
LoadImageA
LoadIconA
GetWindowRect
MoveWindow
ScreenToClient
GetDlgItemInt
IsDlgButtonChecked
PostQuitMessage
CheckDlgButton
DestroyWindow
DefWindowProcA
SetFocus
EnableWindow
GetDlgItemTextA
SetDlgItemInt
SetWindowLongA
SetDlgItemTextA
GetWindowLongA
CallWindowProcA
GetWindowTextLengthA
SendMessageA
PostMessageA
DestroyCaret
GetDlgItem
GetDC
ReleaseDC
CreateCaret
ShowCaret
SendDlgItemMessageA
gdi32
GetTextExtentPoint32A
SelectObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
comctl32
PropertySheetA
ch347dll
CH347Uart_Close
CH347Uart_SetTimeout
CH347Uart_Read
CH347Uart_Write
CH347Uart_Init
CH347Uart_Open
CH347Uart_GetDeviceInfor
CH347SetDeviceNotify
CH347StreamI2C
CH347StreamSPI4
CH347SPI_WriteRead
CH347SetTimeout
CH347Jtag_INIT
CH347Jtag_BitReadIR
CH347Jtag_BitWriteDR
CH347Jtag_BitWriteIR
CH347Jtag_ByteReadIR
CH347Jtag_ByteWriteDR
CH347Jtag_ByteWriteIR
CH347Jtag_SwitchTapState
CH347Jtag_ByteReadDR
CH347Jtag_BitReadDR
CH347GPIO_Get
CH347GPIO_Set
CH347I2C_Set
CH347OpenDevice
CH347GetDeviceInfor
CH347CloseDevice
CH347SPI_Write
CH347SPI_Read
CH347SPI_GetCfg
CH347SPI_Init
CH347SPI_SetChipSelect
CH347WriteEEPROM
CH347ReadEEPROM
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ